Suspicious
Suspect

bf16ace7c29c7688331d0516b01a25a9

PE Executable
|
MD5: bf16ace7c29c7688331d0516b01a25a9
|
Size: 735.74 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
bf16ace7c29c7688331d0516b01a25a9
Sha1
efed480ceeb6365a50a4159c2e29408622cc48f1
Sha256
bc5d307898660f41fb03cf318cc34dc22a73aa380877474773af3b7a7b1b3871
Sha384
0390ae1b5d899438cfe04a113150162056d3c3c6bd093550ee86324cb1836cf5bcd2e0ccead400a383ebc6876fabc0eb
Sha512
6671bcb3f133f7793ff44ec940858db38583884d408f7caa30a8b228a9d22e8e43651ca7f9170762dd661331bfd2f35543c05847e8a96ad0d39a71da2ad5e22a
SSDeep
12288:8BdfKFKz8jgAtsSkFxFpOHovnAoM+f9QJhyogPKE7GEHYADGbB12Ojb:gfKbjOx3OHcDMfkogioH1GbB12Ojb
TLSH
D2F413197A1D9D13D0BA5AFA08A0E3B843B88DDC6112D3CA6FD62CFF74D57112A82753

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual C++ v6.0 DLL
Microsoft Visual Studio .NET
File Structure
bf16ace7c29c7688331d0516b01a25a9
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
 Value
Module Name

BZoI.exe
Full Name

BZoI.exe
EntryPoint

System.Void SectorRepair.Program::Main()
Scope Name

BZoI.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

BZoI
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

320
Main Method

System.Void SectorRepair.Program::Main()
Main IL Instruction Count

7
Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void SectorRepair.Program::InitializeApplication() newobj System.Void SectorRepair.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name

BZoI.exe
Full Name

BZoI.exe
EntryPoint

System.Void SectorRepair.Program::Main()
Scope Name

BZoI.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

BZoI
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

320
Main Method

System.Void SectorRepair.Program::Main()
Main IL Instruction Count

7
Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void SectorRepair.Program::InitializeApplication() newobj System.Void SectorRepair.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Artefacts
Name
 Value
Embedded Resources

5
Suspicious Type Names (1-2 chars)

0
bf16ace7c29c7688331d0516b01a25a9 (735.74 KB)
File Structure
bf16ace7c29c7688331d0516b01a25a9
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
Embedded Resources

5

bf16ace7c29c7688331d0516b01a25a9
Suspicious Type Names (1-2 chars)

0

bf16ace7c29c7688331d0516b01a25a9
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙